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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 12 February 2001 . 
2a)n This action is FINAL. 2b)S This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-18 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) 13 Claim(s) 1-18 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)K accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2.n Certified copies of the priority documents have been received in Application No. . 



3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. ^jj^^ 
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DETAILED ACTION 

1 . This action is responsive to communication: original application filed 
1 1 December 2000. 

2. Claims 1-18 are currently pending in this application. Claims 1,17, and 18 are 
independent claims. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1-18 are rejected under 35 U.S.C. 102(b) as being anticipated by U.S. Patent No. 
5,867,578 by Brickell et al. (hereinafter '578). 

As to independent claim 1, "A method for encrypting a message to be transmitted 
over a network, wherein the method comprises the steps of:" is taught in '578 col. 7, line 34 
through 'col. 8, line 14; 

"encrypting the message for transmission over the network, the resulting encrypted 
message having associated therewith a proof of correctness indicating that the message is of 
a type that allows decryption by one or more escrow authorities; and transmitting the 
encrypted message through the network to a recipient, wherein in traversing the network 
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the proof of correctness associated with the encrypted message is checked by at least one 
module of a server of the network" is taught in '578 col. 6, line 57 through col 7, line 15. 

As to dependent claim 2, "wherein the encrypted message is generated by first 
selecting a random element k from an interval [0 . . . q-1], where q denotes the size of a 
group G, using modulo p, then computing a symmetric key K=hash(g'' mod p) for a 
symmetric encryption technique (E,D), where g is a generator of the group G, and Anally 
computing the encrypted message in the form of a ciphertext M'=Ek(M), where M denotes 
the message being encrypted" is shovm in '578 col. 9, line 10 through col. 10, line 40. 

As to dependent claim 3, "wherein also associated with the encrypted message is an 
element a=yd°* g** and an element b=g«, where a is chosen uniformly at random from [0 . . . 
q-1] and yd is a public encryption key" is disclosed in '578 col. 9, lines 10-45. 

As to dependent claim 4, "wherein the proof of correctness comprises a proof of 
knowledge of (a,k) that does not yd** or g*^" is taught in '578 col. 7, lines 1-5. 

As to dependent claim 5, "wherein also associated with the encrypted message is a 
certificate Cd on a public encryption key yd" is shovra in '578 col. 10, lines 15-19. 

As to dependent claim 6, "wherein the encrypted message is considered valid by the 
module of the server if the proof of correctness is valid and the certificate Cd is valid" is 
disclosed in '578 col. 10, lines 26-31. 

As to dependent claim 7, "wherein the certificate Cd is considered valid if it is a 
valid certificate for encryption" is taught in '578 col. 10, lines 26-31. 

As to dependent claim 8, "wherein the proof of correctness comprises a proof c in 
the form of a triple (r, si, s2)" is taught in '578 col. 17, lines 33-38. 
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As to dependent claim 9, "wherein the proof c is generated using the steps of: 
selecting two elements pi and P2 at random from an interval [0 • . . q-1]; computing r= y^fi^ 
gP^(mod p); computing e=hash(r, a); computing sl=pl+e*a(mod q); computing 
s2=p2+e*k(mod q) and outputting the triple (r, si, s2) as the proof c" is taught in '578 
col 21, line 66 through col. 22, line 65. 

As to dependent claim 10, "wherein the encrypted message is decrypted by a 
recipient using the steps of: computing B=b*^ (mod p), where Xd is a secret key 
corresponding to a public key yu; computing K=hash(a/B mod p); and computing the 
message M as M=Dk(M')" is taught in '578 col. 9, line 10 through col. 10, line 40. 

As to dependent claim 11, "wherein the proof of correctness comprising the proof c 
in the form of the triple (r, si, s2) is checked by computing e=hash(r, a) and verifying that 
yd'^*g'^=r*a'" is shown in '578 col. 21, line 66 through col. 22, line 65. 

As to dependent claim 12, "wherein if the check of the proof of correctness indicates 
that the proof is invalid, the module of the server directs that the encrypted message be 
discarded" is disclosed in 878 col. 7, lines 25-34. 

As to dependent claim 13, "wherein the network comprises a plurality of servers, 
and wherein each of at least a subset of the servers includes a module for checking the 
proof of correctness if the corresponding encrypted message passes through the 
corresponding server in being transmitted from a sender to the recipient through the 
network" is taught in '578 col. 7, line 34 through col. 8, line 47. 

As to dependent claim 14, "wherein the one or more escrow authorities comprises 
an escrow authority associated with a public key used for encryption of the message, and 
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wherein the escrow authority associated with the public key is able to decrypt the 
encrypted message to obtain a plaintext message" is shown in '578 col. 6, lines 16-65. 

As to dependent claim 15, ^Vherein the escrow agent associated with the public key 
is able to decrypt the encrypted message without exposing a corresponding secret key, 
using a threshold-based method" is disclosed in '578 col. 10, lines 52-67. 

As to dependent claim 16, "wherein associated with the encrypted message is a first 
element that is generated using a public key of the recipient and can be decrypted by a 
party holding the corresponding secret key, and a second element that proves that the first 
element can be decrypted by a party holding the corresponding secret key" is taught in '578 
col. 6, lines 57-65 

As to independent claim 17, this claim is directed to an apparatus of the method of 
claim 1 and it is rejected along the same rationale. 

As to independent claim 18, this claim is directed to an article of manufacture 
comprising one or more software programs of the method of claim 1 and it is rejected along the 
same rationale. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 



examiner should be directed to Ellen C Iran whose telephone number is 

(703) 305-8917. The examiner can normally be reached on 6:30 am to 3:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

supervisor, Gregory A Morse can be reached on (703) 308-4789. The fax phone 

number for the organization where this application or proceeding is assigned is 703- 

872-9306. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 306-5484. 



Ellen. Tran 
Patent Examiner 
Technology Center 2134 
27 July, 2004 




